$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oZ0HOj-IIICDSmMM-bVg0uF-ExI.roa File: oZ0HOj-IIICDSmMM-bVg0uF-ExI.roa (raw, json) Hash identifier: +olRDMCOl4Hqwh/5HCNbK0MSdexq5rC0Qa6SgeCyYsQ= Subject key identifier: A1:9D:07:3A:3F:88:20:80:83:4A:63:0C:F9:B5:60:D2:E1:7E:13:12 Certificate issuer: /CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Certificate serial: 0EDA Authority key identifier: A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oZ0HOj-IIICDSmMM-bVg0uF-ExI.roa Signing time: Mon 10 Feb 2025 14:12:01 +0000 ROA not before: Mon 10 Feb 2025 14:12:01 +0000 ROA not after: Tue 26 Aug 2025 01:57:03 +0000 asID: 131633 IP address blocks: 103.135.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.mft rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.crl rsync://rpkica.twnic.tw/rpki/TWNICCA/ojp8Y1RxGKrkl_A-ExIclqs0VH4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ojp8Y1RxGKrkl_A-ExIclqs0VH4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3802 (0xeda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A18EB377DD0318AE465D8F3F7D6E0AD0A4E9ED1E Validity Not Before: Feb 10 14:12:01 2025 GMT Not After : Aug 26 01:57:03 2025 GMT Subject: CN=A19D073A3F882080834A630CF9B560D2E17E1312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ab:59:76:6a:f5:1e:37:35:6d:e4:13:6a:0e: c3:f7:72:9f:9c:45:a8:6f:31:4f:3a:6b:c4:87:6a: ff:7e:bc:40:95:26:48:6c:0b:cf:0b:b8:6d:d9:3b: 7c:8a:23:d8:27:63:c6:d5:f0:13:fe:7d:31:65:8e: 63:95:09:46:89:57:fa:02:3a:3b:e3:b2:28:fc:2f: 7e:4e:55:43:2f:4e:ad:bb:82:e8:37:6c:f4:e2:50: cd:71:22:43:04:c4:85:5e:cd:17:73:15:3b:87:13: 26:2f:3c:3e:86:93:60:8e:c3:83:ca:34:d6:a7:98: 30:3e:c9:b3:68:4c:6d:d0:69:89:3c:c0:23:bf:b7: bf:2d:2f:69:de:5b:1a:ef:dd:df:e6:81:99:f5:af: db:cc:cc:6c:61:17:a4:fc:f1:0c:89:b6:0f:ee:05: 47:4c:75:a0:13:79:b1:e4:be:6b:c5:1e:1f:20:a6: 7c:de:98:be:54:d7:d9:7b:cc:3a:24:a8:f1:bd:33: 16:f6:3e:fa:4a:b8:c3:2b:0b:7e:8e:f7:79:78:03: ae:e8:ce:25:a3:e9:ad:a4:d8:c4:4a:61:d3:16:3b: fb:5a:06:14:a4:3b:2d:0c:4a:82:cb:86:56:06:69: b2:73:12:15:b9:6f:25:58:b4:c8:3f:5c:a9:00:1e: a3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9D:07:3A:3F:88:20:80:83:4A:63:0C:F9:B5:60:D2:E1:7E:13:12 X509v3 Authority Key Identifier: keyid:A1:8E:B3:77:DD:03:18:AE:46:5D:8F:3F:7D:6E:0A:D0:A4:E9:ED:1E X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oY6zd90DGK5GXY8_fW4K0KTp7R4.crl Authority Information Access: CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/oY6zd90DGK5GXY8_fW4K0KTp7R4.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/MINGJINGEN/oZ0HOj-IIICDSmMM-bVg0uF-ExI.roa RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.135.22.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:ee:7a:9d:d3:86:4b:48:4b:9d:78:cd:18:09:aa:73:8f:71: 6e:07:21:89:a8:64:75:3d:88:86:2d:c7:45:51:e8:e2:b3:82: d9:7d:88:0a:87:23:59:e7:ff:ab:4b:2f:17:78:92:89:d4:62: 59:cd:36:73:c5:a8:b2:d6:1e:53:6b:f9:83:b5:39:d2:c7:c9: bc:42:06:71:1f:7e:0e:ee:9b:b4:38:e5:b7:08:41:65:af:29: 9e:d9:16:ef:fd:77:26:ba:15:bf:80:cc:f1:51:a9:70:1b:da: 97:a2:b8:0f:29:1e:79:30:36:20:53:24:80:13:c5:00:f4:be: 33:3f:cd:2c:25:92:03:88:39:ad:d5:a7:32:d7:e4:a5:67:f5: 4a:f4:58:85:9e:a4:f9:2b:7b:fa:8a:51:c5:62:a2:9e:b8:6d: f7:45:70:c3:fb:e6:28:0a:c3:05:4e:04:b7:10:be:70:a7:f2: bf:ff:62:42:26:19:c1:47:bf:5c:db:6f:54:0f:f0:fc:2e:17: 71:d3:78:3e:99:5a:b4:eb:54:eb:d4:7c:d3:5e:b1:1f:af:0e: ba:b2:7c:99:b6:a2:ac:de:5f:b3:0c:eb:41:04:6c:24:bd:71: 83:2d:cc:59:00:7c:2d:c8:ae:b7:a4:0d:2a:57:2e:1c:61:27: 3e:a2:8b:75 -----BEGIN CERTIFICATE----- MIIE2jCCA8KgAwIBAgICDtowDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoQTE4 RUIzNzdERDAzMThBRTQ2NUQ4RjNGN0Q2RTBBRDBBNEU5RUQxRTAeFw0yNTAyMTAx NDEyMDFaFw0yNTA4MjYwMTU3MDNaMDMxMTAvBgNVBAMTKEExOUQwNzNBM0Y4ODIw ODA4MzRBNjMwQ0Y5QjU2MEQyRTE3RTEzMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDdq1l2avUeNzVt5BNqDsP3cp+cRahvMU86a8SHav9+vECVJkhs C88LuG3ZO3yKI9gnY8bV8BP+fTFljmOVCUaJV/oCOjvjsij8L35OVUMvTq27gug3 bPTiUM1xIkMExIVezRdzFTuHEyYvPD6Gk2COw4PKNNanmDA+ybNoTG3QaYk8wCO/ t78tL2neWxrv3d/mgZn1r9vMzGxhF6T88QyJtg/uBUdMdaATebHkvmvFHh8gpnze mL5U19l7zDokqPG9Mxb2PvpKuMMrC36O93l4A67oziWj6a2k2MRKYdMWO/taBhSk Oy0MSoLLhlYGabJzEhW5byVYtMg/XKkAHqNFAgMBAAGjggH2MIIB8jAdBgNVHQ4E FgQUoZ0HOj+IIICDSmMM+bVg0uF+ExIwHwYDVR0jBBgwFoAUoY6zd90DGK5GXY8/ fW4K0KTp7R4wGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBgBgNVHR8EWTBXMFWg U6BRhk9yc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvTUlOR0pJ TkdFTi9vWTZ6ZDkwREdLNUdYWThfZlc0SzBLVHA3UjQuY3JsMGAGCCsGAQUFBwEB BFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9ycGtpY2EudHduaWMudHcvcnBraS9U V05JQ0NBL29ZNnpkOTBER0s1R1hZOF9mVzRLMEtUcDdSNC5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGgBggrBgEFBQcBCwSBkzCBkDBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9y cGtpY2EudHduaWMudHcvcnBraS9UV05JQ0NBL01JTkdKSU5HRU4vb1owSE9qLUlJ SUNEU21NTS1iVmcwdUYtRXhJLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycmRw LnR3bmljLnR3L3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAWeHFjANBgkqhkiG9w0BAQsFAAOCAQEATO56ndOGS0hLnXjNGAmqc49x bgchiahkdT2Ihi3HRVHo4rOC2X2ICocjWef/q0svF3iSidRiWc02c8WostYeU2v5 g7U50sfJvEIGcR9+Du6btDjltwhBZa8pntkW7/13JroVv4DM8VGpcBval6K4Dyke eTA2IFMkgBPFAPS+Mz/NLCWSA4g5rdWnMtfkpWf1SvRYhZ6k+St7+opRxWKinrht 90Vww/vmKArDBU4EtxC+cKfyv/9iQiYZwUe/XNtvVA/w/C4XcdN4PplatOtU69R8 016xH68OurJ8mbairN5fswzrQQRsJL1xgy3MWQB8Lciut6QNKlcuHGEnPqKLdQ== -----END CERTIFICATE-----Generated at Mon Apr 7 01:21:49 2025 by rpki-client